Privacy Policy
How MRM Soluções LTDA handles your data at fuckofftherules.com, under Brazil's General Data Protection Law (LGPD).
1. What we collect
Email: it is your access identity. Without it there is no way to give you back the book you bought.
Name: when Stripe passes it along at payment. Used only to address you by name.
Session data: browser, operating system and IP address of each connected device. Used so you can recognise your own devices and to enforce the 3-device limit.
Payment data: handled entirely by Stripe. We never see or store card numbers.
2. Why we process it
Contract performance: delivering the access you paid for, and proving you are you on each sign-in.
Legal obligation: keeping transaction records.
Legitimate interest: limiting improper account sharing, which keeps the product viable.
We do not use your data for advertising and do not send marketing without your explicit request.
3. Who we share with
Stripe — payment processing.
Resend — access emails.
Neon — database.
Vercel — hosting.
None of them receive your data for their own use, and we sell data to no one. Some operate outside Brazil, which involves international transfer under those providers' contractual safeguards.
4. How long we keep it
Account and access entitlement: for as long as access exists.
Sessions: expire in 30 days, or sooner if you sign out or are disconnected by the device limit.
Access links: 15 minutes, after which only the fact that they were used is recorded.
Transaction records: for as long as tax law requires.
5. Your rights
You have the right to confirm processing, access, correct, port and request deletion of your data, and to withdraw consent.
To exercise any of them, write to acesso@fuckofftherules.com. We respond within 15 days.
Requesting account deletion ends your access to the book — the two are linked, and one cannot be kept without the other.
6. Security
We store no passwords, because we use no passwords. Access and session tokens are stored only as SHA-256 hashes: a database leak grants access to no one.
All traffic is encrypted over HTTPS.
7. Cookies
We use two cookies, both strictly necessary: one holds your reading session, the other remembers your chosen language.
We use no advertising or third-party tracking cookies. That is why there is no consent banner: there is nothing to consent to.